diff --git a/rbac/policy/policy.go b/rbac/policy/policy.go
index 53eb6258..be5db8ec 100644
--- a/rbac/policy/policy.go
+++ b/rbac/policy/policy.go
@@ -269,8 +269,13 @@ const (
 	ActionPlaybookCancel  = "playbook:cancel"
 
 	ActionPluginInvokePrefix = "invoke:"
+	ActionPluginRolePrefix   = "plugin-role:"
 )
 
+func NewPluginRoleAction(plugin, role string) string {
+	return fmt.Sprintf("%s%s:%s", ActionPluginRolePrefix, plugin, role)
+}
+
 func NewPluginInvokeAction(plugin, operation string) string {
 	return fmt.Sprintf("%s%s:%s", ActionPluginInvokePrefix, plugin, operation)
 }